Salesforce Security Engineer — Splunk Analytics & ATO Readiness

Steampunk; McLean (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Steampunk seeks a Salesforce Security Engineer to be the primary security contact for the Salesforce environment. You will strengthen the security posture, address security questions, and support ATO activities, including building Splunk queries to detect anomalous events.

The role requires implementing access controls, conducting recertifications, configuring security settings, and collaborating with ISSOs and compliance teams to meet federal requirements. A U.S.

Qualifications

• Ability to obtain and maintain a U.S. Government security clearance.
• Bachelor’s degree in a related field.
• 8–10 years of experience in Salesforce administration or security engineering.
• Strong knowledge of Salesforce access control models and least privilege implementation.
• Extensive experience with Salesforce security configurations (Health Check, Event Monitoring, Shield).
• Proficient in writing Splunk search queries for log analysis, monitoring, and alerting.

Responsibilities

• Design, implement, and audit Salesforce access controls across profiles, permission sets, roles, sharing rules, and field-level security.
• Conduct periodic access reviews and recertifications to remediate overly permissive access.
• Configure and maintain Salesforce security settings via the Setup Menu (session security, login policies, MFA, Health Check).
• Build and maintain Splunk queries and dashboards to monitor login events and anomalous access patterns; support investigations.
• Assess and harden web app security for Connected Apps (CORS, CSP, Trusted URLs, OAuth policies).
• Assist ISSOs in securing applications and collecting security artifacts for ATO efforts.
• Work with system owners and compliance teams to align configurations with NIST 800-53, FedRAMP where applicable.
• Document security configurations, findings, and remediation steps for audits.

Skills

Splunk SPL

Salesforce security

Access control models

Web application security

Education

Bachelor’s degree

Tools

Splunk

Event Monitoring

Health Check

OAuth flows

Job description

Steampunk seeks a Salesforce Security Engineer to be the primary security contact for the Salesforce environment. You will strengthen the security posture, address security questions, and support ATO activities, including building Splunk queries to detect anomalous events.

The role requires implementing access controls, conducting recertifications, configuring security settings, and collaborating with ISSOs and compliance teams to meet federal requirements. A U.S.